convert-pptx
Warn
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill constructs a bash command by directly interpolating input variables into a shell string. If the provided file path ($1) contains shell metacharacters such as backticks or semicolons, it could lead to arbitrary command execution. Evidence:
python -m markitdown "$1" -o "$OUTPUT_DIR/output.md"in SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PowerPoint files, which can contain hidden or explicit instructions meant to hijack the AI agent's behavior once the resulting markdown is read. 1. Ingestion points: PPTX files provided at path $1. 2. Boundary markers: None; the skill does not wrap extracted text in delimiters or provide 'ignore' instructions. 3. Capability inventory: Uses Bash and Write tools, which could be abused if an injection succeeds. 4. Sanitization: No sanitization of the PPTX content is performed before extraction.
- [EXTERNAL_DOWNLOADS]: The skill fetches the 'markitdown' utility from a well-known official registry. Evidence: Step 1 ensures the installation of the markitdown dependency.
Audit Metadata